CollabCircle

Privacy Policy

Last updated: 7 August 2026

CollabCircle ("CollabCircle", "we", "us") operates the influencer marketing platform at collabcircle.in. This Privacy Policy explains what information we collect, why we collect it, how we use and share it, and the choices you have. By using CollabCircle you agree to this policy.

1. Who we are

Data controller: CollabCircle, India. Privacy contact: privacy@collabcircle.in.

2. Information we collect

2.1 Information you give us

  • Account data: email address and one-time passcodes used to sign in.
  • WhatsApp number (optional): if you choose to receive campaign alerts on WhatsApp, we store the number you enter and a one-time verification code in order to confirm it is yours. You can remove the number at any time from your profile.
  • Creator profile: name, display name, city, country, bio, categories/niches, languages, content pricing and payout preferences.
  • Brand profile: company name, website, industry, contact details and campaign briefs (title, description, category, budget, deliverables, deadlines).
  • Content you submit: campaign applications, in-app messages and files attached to those messages.

2.2 Information from connected social accounts

If you choose to connect a social account, we receive data from that platform's API only after you grant permission through the platform's own consent screen:

  • Google / YouTube. We request a single scope, https://www.googleapis.com/auth/youtube.readonly, and use it only to read the channel of the signed-in user: channel ID, channel title, handle, thumbnail, subscriber count, video count, total view count, the uploads playlist, and public statistics (views, likes, comments) for the most recent videos. This is used solely to display your channel in CollabCircle and to calculate your engagement and influence score. We do not request YouTube Analytics, and we do not read, upload, edit or delete any content.
  • Meta (Facebook). With the public_profile permission we receive your Facebook user ID, name and profile picture, used only to show that your Facebook account is connected to your CollabCircle profile.

We request read-only scopes. We never request permission to post, edit, delete or otherwise modify content on your accounts.

2.3 Information collected automatically

  • Technical data: IP address, browser and device type, and timestamps of requests.
  • Product usage: pages viewed and actions taken in the app, used for security and to improve the service.
  • Essential cookies and local storage: used to keep you signed in and remember your theme preference. We do not use advertising cookies.

3. How we use your information

  • To create and secure your account and authenticate you by email OTP.
  • To compute your CollabCircle engagement and influence scores from reach, views and weighted engagement actions, and to display those scores and their trend to you.
  • To match creators with relevant campaigns and to let brands review, shortlist and message the creators who apply.
  • To send transactional emails and in-app notifications about your account activity.
  • To detect fraud and inauthentic engagement, and to enforce our Terms of Service.
  • To comply with legal obligations.

We do not sell your personal data, and we do not use Google user data or Meta platform data for advertising, credit assessment, or to train generalised artificial intelligence or machine learning models.

4. Google API Services User Data Policy (Limited Use)

CollabCircle's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

  • We use Google user data — both the raw data returned by the YouTube Data API and any aggregated, derived or anonymised values computed from it (for example your average views per video, engagement rate, tier and influence score) — only to provide and improve the user-facing features described in this policy: verifying channel ownership and calculating and displaying your engagement and influence scores.
  • We do not transfer raw or aggregated/anonymised Google user data to third parties except as described in §6, and never to data brokers, advertisers, or for lending or credit decisions.
  • We do not use raw or aggregated/anonymised Google user data for serving advertisements.
  • We do not use raw or aggregated/anonymised Google user data to develop, improve or train any generalised artificial intelligence or machine learning model, and we do not transfer it to any third-party service that would use it for such training. Our influence score is a fixed, published arithmetic formula, not a trained model.
  • Our use of YouTube API Services stays within the allowed use cases: we never reward, incentivise or automate subscriptions, likes, comments or views, and we never use the API for bulk storage or content distribution.
  • We do not allow humans to read Google user data unless (a) we have your affirmative consent for specific data, (b) it is necessary for security purposes such as investigating abuse, (c) it is required to comply with applicable law, or (d) the data is aggregated and anonymised for internal operations.

By connecting YouTube, you are also agreeing to the YouTube Terms of Service. Our use of YouTube API Services is subject to the Google Privacy Policy. You may revoke CollabCircle's access to your Google account at any time via the Google security settings page, or by disconnecting YouTube from your CollabCircle profile — which deletes the stored tokens and cached YouTube data.

5. Legal bases (EEA/UK users)

Where GDPR applies, we rely on: performance of a contract (operating your account and campaigns), consent (connecting social accounts and marketing email), legitimate interests (security, fraud prevention, product improvement) and legal obligation.

6. How we share information

  • With brands: when you apply to a campaign, that brand sees your creator profile, connected platform handles, follower/reach figures and your scores. Your email address and phone number are not shown unless you share them.
  • Service providers: Supabase (database, authentication, file storage), Cloudflare (hosting and delivery), our transactional and notification email providers, and — only if you opt in to WhatsApp alerts — our WhatsApp messaging provider, which receives your phone number and the message text. They act as processors and handle data only on our instructions. Data received from Google APIs is never shared with any of these providers for their own purposes, and never for advertising.
  • Legal: where required by law, court order, or to protect rights, safety and the integrity of the service.
  • Business transfer: in a merger or acquisition, subject to this policy.

7. Storage, retention and security

  • OAuth access and refresh tokens are encrypted at rest with AES-256-GCM and are never exposed to the browser or to other users.
  • All traffic is served over HTTPS/TLS. Database access is protected by row-level security so users can only reach their own records.
  • We keep account data while your account is active. Cached platform metrics are refreshed on sync and are deleted when you disconnect the platform. After you delete your account we remove personal data within 30 days, except where retention is legally required.
  • Google/YouTube data specifically: OAuth tokens and cached channel metrics are deleted immediately when you disconnect YouTube in CollabCircle, and the refresh token is revoked with Google at the same time. We store no copy of your YouTube data after disconnection.

8. Your rights and choices

  • Access, correct or export your profile data from your CollabCircle profile page.
  • Disconnect any social platform at any time from your profile.
  • Delete your account and all associated data yourself using our data deletion page, or by emailing privacy@collabcircle.in. We action deletion requests within 30 days.
  • Object to or restrict processing, and lodge a complaint with your data authority.

9. Children

CollabCircle is not intended for anyone under 18. We do not knowingly collect data from children; if we learn we have, we delete it.

10. International transfers

Our providers may process data outside your country. Where required, transfers are covered by Standard Contractual Clauses or equivalent safeguards.

11. Changes

We will post any changes on this page and update the date above. Material changes will also be notified in-app or by email.

12. Contact

Questions or requests: privacy@collabcircle.in. See also our Terms of Service.